Mason

TYPES OF PERSONAL INFORMATION WE COLLECT
The categories of Personal Information we may collect include:

Registration and profile information collected when you sign up for the Service. We may collect Personal Information, such as a username, first and last name, phone number or e-mail address, as well as information about your business, when you register for the Service or if you correspond with us. We may also collect information about your interactions with us, including any contact we have with you by telephone, email or online. For service improvement, security, dispute resolution and training purposes we may monitor and record your communications with us (including email and telephone) in accordance with applicable laws.
Information collected through Mason Payments. If you use Mason Payments to receive payments from End Customers (see Section 7 of our Terms of Service), we may collect certain information regarding your transactions from you or from our Payments Partner. If you are an End Customer paying an invoice through Mason Payments as described in our Payment Terms, we and our Payments Partner receive certain information as described in Section 7 (How We Store and Protect Your Information)
Personal and business information collected through your use of the Service. After you set up an account for the Service and in order to provide the Service to you, we may collect various information through your use of the Service about your business and your customers, for example, your phone number, accounts receivable information or your customers’ mailing addresses or taxpayer identification numbers. We use and share information about your customers solely to provide you and your customers with our services and in accordance with Section 3 (How We Use the Information We Collect) and Section 4 (How We Share Your Information) and our Terms of Service.
Usage, viewing and technical information collected when you use the Service. Any time you use the Service (even if you do not register for our Service), we may collect information about how you access or use the Service or input data. For more information about how we collect and use this information, see Section 2 (Our Use of Cookies and Other Technologies).
Information we collect from social networks and third parties. We may receive information about you when you interact with the Service through various social media, for example, by logging in through or “liking” us on Facebook or “following” us on Twitter. The data we receive is dependent upon your privacy settings with the social network. You should always review, and, if necessary, adjust your privacy settings on third party websites and services before linking or connecting them to the Service. In addition, we may receive information about you from other sources, such as referrals from other websites or affiliates, marketing partners or analytics providers, or our Lending Partners, which we also use and share in accordance with this Privacy Notice. We do so only where we have checked that you have provided your consent or where the third parties are otherwise legally permitted or required to disclose your Personal Information to us.

OUR USE OF COOKIES AND OTHER TECHNOLOGIES

Cookies, Pixels and Web Beacons. We automatically collect certain types of usage information when you access or use the Service, including cookies and similar tracking technologies, such as pixels and web beacons. Our use of cookies and other tracking technologies is discussed in more detail in our Cookie Statement. Although we do our best to honor the privacy preferences of our users, we are not able to respond to Do Not Track signals from your browser at this time, as we believe that there is no consistent industry standard for how to respond to Do Not Track browser settings.
Device IDs. When you access the Site or use the Service by or through a mobile device, we may receive or collect and store a unique identification number associated with your device (“Device ID”), mobile carrier, device type and manufacturer, phone number, and, depending on your mobile device settings, your geographical location data, including GPS coordinates (e.g. latitude and/or longitude) or similar information regarding the location of your mobile device. Please note we will not collect your precise geographical location without your consent but we may know the city or country you are in. Similar to IP addresses, we may link any of the contact or other personal information you provide during a browsing session to the Device ID from which you are accessing the Site.

HOW WE USE THE INFORMATION WE COLLECT
We use your information in the following ways:

To provide, maintain and improve the Service and our other products and services, including to operate certain features and functionality of the Service;
To process your order or inquiries;
To diagnose or fix technology problems;
To control unauthorized use or abuse of the Service and our other products and services, or otherwise detect, investigate or prevent activities that may violate our policies or be illegal;
To prosecute and/or defend a court, arbitration or similar legal proceeding, or to respond to lawful requests by public authorities (including national security or law enforcement requirements);
To analyze trends, administer or optimize the Service, monitor usage or traffic patterns (including to better understand how you use the Service) and gather demographic information about our user base as a whole;
To communicate directly with you, including by phone (as described below), by sending you newsletters, promotions and special offers or information about new products and services on an ongoing basis in accordance with your marketing preferences. Your opt-out options for promotional communications are described below under Section 5 (Your Choices about Your Information). You can unsubscribe from our marketing communications by clicking “Unsubscribe” at the bottom of the email or by contacting us using the contact details provided under the “How to contact us” heading below;
To communicate directly with you by phone, including to respond to customer service inquiries or comments through the Service, on social media or otherwise, and to discuss issues relating to your account or the Service. Your opt-out options for calls from us are described below under Section 5 (Your Choices about Your Information) below;
To deliver advertising to you, including to help advertisers and publishers serve and manage ads on the Service or on third party sites, and to tailor ads based on your interests and browsing history (please see Section 2 (Our Use of Cookies and Other Technologies) and Section 5 below (Your Choices about Your Information) for additional information related to such advertising and your related controls); and
To carry out other legitimate business purposes, as well as other lawful purposes about which we will notify you.

Any use of your information that is incompatible with the foregoing will be disclosed to you in advance so that you may opt out of such use at your discretion.

HOW WE SHARE YOUR INFORMATION
Generally. We may share your Personal Information with:

Our parent companies, subsidiaries and affiliates. These companies will use the information in the same way as we can under this Privacy Notice;
Third party vendors and other service providers that perform services on our behalf, as needed to carry out their work for us, which may include identifying and serving targeted advertisements, content or service fulfilment, or providing analytic, archival, auditing, accounting, legal, business consulting, banking, payment, delivery, data processing, data analysis, research, investigation, website or other technology services;
Our Payments Partners and related integration partners, if you enable Invoice2go Payments to receive payments from your End Customers (see Section 8 of our Terms of Service). In this case, we may provide the Payments Partners with certain information about your business and your use of the Service for their use in underwriting and risk and fraud modeling, for use subject to their own privacy policies and terms;
Our payment processors, for the purposes described in Section 7 (How We Store and Protect Your Information);
Our business partners who offer a service to you jointly with us, for example, when running a co-sponsored contest or promotion, in accordance with your marketing preferences;
Other users of the Service who have sent you an invoice or with whom you’ve otherwise interacted through the features of the Service. For example, as a customer of one of our users, we may share certain information about you with that user, such as whether you have opened an emailed invoice or made a payment;
Other parties in connection with a company transaction, such as a merger, sale of company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by another company or third party or in the event of a bankruptcy or related or similar proceedings;
Third parties if we have a good faith belief that disclosure of such information is reasonably necessary to: (i) satisfy any law, legal process or governmental request; (ii) enforce our Terms of Service, including investigation of potential violations thereof; or (iii) protect against fraud, imminent harm to the Service or the rights, property or safety of Mason, our users or the public as required or permitted by law;
Any other person with your consent to the disclosure.

Third Party Capital and Lending Partners. Without limiting the rest of this Section 4, We may also provide anonymized information about you to our Capital or Lending Partners, who may use it to provide you with opportunities for Capital or Loans (which may be displayed through the Service or separately) and related purposes. For example, this may include non-personally identifiable information about your Mason account, invoicing history or use of the Service. If you wish to opt-out of this information sharing, please contact Mason at support@usemason.com. You will not be identified by name to the Capital or Lending Partner unless you respond to its Capital or Loan offer; if you respond, you will be asked to provide (or to consent to provision of) your name and other information directly to the Capital or Lending Partner, for the Capital or Lending Partner’s use in accordance its separate agreement or terms with you. For more information about Capital or Lending Partners, please see Section 9 (Third Party Capital and Lending Partners) of the Terms of Service.

Other Aggregated and Anonymized Data. We may also share aggregated, anonymized with third parties for other purposes. Such information does not identify you individually, but may include usage, viewing and technical information we collected through our technology. If we are required under applicable law to treat such information as Personal Information, then we will only disclose it as described above. Otherwise we may disclose such information for any reason. Please note that Invoice2go is not responsible should an invoice recipient choose to share an invoice containing your information with third parties.

YOUR CHOICES ABOUT YOUR INFORMATION

You control your account information and communication preferences: You may update certain of your account information and communication preferences at any time by logging into your account and changing your account settings. You can also stop receiving calls from us by emailing us your opt-out request at legal@usemason.com. You can stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not, however, opt out of Service-related communications (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices) unless you terminate your account. If you have any questions about reviewing or modifying your account information, you can contact us directly at the address provided in Section 13 (How to Contact Us).
How long we keep your Personal Information: Retention periods can vary significantly based on the type of information we collect and the how it is used. Mason’s retention periods are based on criteria that include legally mandated retention periods, pending or potential litigation, our intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving.

THIRD PARTY TRACKING AND ONLINE ADVERTISING

We may permit third party ad networks, social media companies, and other third party services to collect information about your browsing behavior on the Service through cookies, social plug-ins, or other tracking technology. We may permit third party online advertising networks to collect information about your use of the Service over time so that they may play or display ads that may be relevant to your interests on the Service as well as on other websites or services. We will not share information about your clients or your business with these third parties. Typically, the information is collected through cookies or similar tracking technologies. The only way to completely “opt out” of the collection of any information through cookies or other tracking technology is to actively manage the settings on your browser or mobile device. Please refer to your browser’s or mobile device’s technical information for instructions on how to delete and disable cookies, and other tracking/recording tools. (To learn more about cookies, clear gifs/web beacons and related technologies and how you may opt-out of some of this tracking, you may wish to visit http://www.allaboutcookies.org and/or the Network Advertising Initiative’s online resources, at http://www.networkadvertising.org.) Depending on your mobile device, you may not be able to control tracking technologies through settings. If you have any questions about opting out of the collection of cookies and other tracking/recording tools, you can contact us directly at the address provided in Section 13 (How to Contact Us).

HOW WE STORE AND PROTECT YOUR INFORMATION

Payment Information: Mason collects credit card information using a security-enabled, transparent pass-through to our payment processors and does not store full credit card numbers or any CVV2 data itself. Any credit card information you provide is stored by our third party payment processors (including our Payments Partner, if you use Mason Payments), who have committed to complying with the Payment Card Industry Data Security Standard (PCI-DSS). Our payment processors use your payment information as follows:
Payments to Mason. When you pay Mason through our Site for access to the Service, our third party payment processors may use your information for the following purposes: (i) processing your payment to Mason, (ii) preparing internal reports to manage their business; (iii) data analytics, developing and analyzing data metrics, anonymizing personal data and other analysis purposes, and to publish in aggregated form the results of such analyses; (iv) providing fraud screening services to Mason or third parties; (v) processing and/or resolving chargebacks or other disputes; (vi) complying with applicable legal requirements and assisting law enforcement agencies by responding to requests for disclosure of personal data in accordance with local laws; and (vii) any other purpose for which your consent has been provided.
Payments to Merchants. If you are an End Customer using Mason Payments to pay a Merchant, then our Payments Partner will use your information as described in its own privacy policy.

In addition to the above, Mason may receive (from you or from its payment processors) the name on a credit card, the cardholder postal code, the last four digits of a credit card number and certain other transaction information, which we use in accordance with this Privacy Notice as described in Section 3 (How We Use the Information We Collect).

Storage, Processing and International Transfers: Information collected through the Service may be stored and processed in the United States or other country in which Mason or its subsidiaries, affiliates or service providers maintain facilities. If you are located in the European Economic Area (“EEA“), Australia or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including Personal Information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. However, we have taken appropriate safeguards to require that your Personal Information will remain protected in accordance with this Privacy Notice. These safeguards may include for Personal Information of EU residents implementing the European Commission’s Standard Contractual Clauses for transfers of Personal Information with our third party service providers and partners. Further details will be provided upon request.
Keeping your information safe: Mason cares about the security of your information, and uses appropriate technical and organizational measures to preserve the integrity and security of all information collected through the Service. However, no security system is impenetrable and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, Mason will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.
Password Security: Your password is an important element of our security scheme, and as such, you are responsible for maintaining the confidentiality of your password and account, and are fully responsible for all activities that occur under your password or account. You must report any misuse or compromise of your password to Mason at the contact address provided in Section 13 (How to Contact Us) as soon as you become aware of any such misuse or compromise.

LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION (EEA VISITORS ONLY)

If you are a user from the EEA, our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it. However, we will normally collect Personal Information from you only where we have your consent to do so, where we need the Personal Information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Information from you.If we ask you to provide Personal Information to comply with a legal requirement or to perform a contact with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Information is mandatory or not (as well as of the possible consequences if you do not provide your Personal Information).

Similarly, if we collect and use your Personal Information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Information, please contact us using the contact details provided in Section 13 (How to Contact Us).

YOUR DATA PROTECTION RIGHTS
You have the following data protection rights:

To access, correct, update or request deletion of your Personal Information. Mason takes reasonable steps to ensure that the data we collect is reliable for its intended use, accurate, complete and up to date. You can exercise these rights by contacting us using the contact details provided in Section 13 (How to Contact Us).
In addition, if you are a resident of the EEA, you can object to processing of your Personal Information, ask us to restrict processing of your Personal Information or request portability of your Personal Information. You can exercise these rights by contacting us using the contact details provided in Section 13 (How to Contact Us).
Similarly, if we have collected and process your Personal Information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
You have the right to complain to a data protection authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the EEA are available here.) If you are an Australian resident, for information about privacy generally, or if your concerns are not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner at www.privacy.gov.au and on 1300 363 992.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We may ask you to verify your identity in order to help us respond efficiently to your request.

Direct Marketing: If you are a user in the EU or Australia, we will not disclose your Personal Information to third parties for such third parties’ direct marketing purposes unless you have opted-in to such disclosures. Please note that even if you do not opt‐in, we may still share your information with third parties for purposes other than direct marketing, such as for completing a requested transaction or any other non-direct marketing purposes described under this Privacy Notice. For more information regarding how we share your data with third parties, please see Section 4 (How We Share Your Information).

NOTICE TO CALIFORNIA RESIDENTS: YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, it is our policy pursuant to California’s Shine the Light Law (CA Civil Code Section 1798.83) not to disclose your Personal Information to third parties for such third parties’ direct marketing purposes unless you have opted-in to such disclosures. Please note that even if you do not opt-in, we may still share your information with third parties for purposes other than direct marketing, such as for completing a requested transaction or any other non-direct marketing purposes permitted under this Privacy Notice.

CHILDREN’S PRIVACY

Mason does not knowingly collect or solicit any information from anyone under the age of 16 or knowingly allow such persons to register as users. In the event that we learn that we have collected Personal Information from a child under age 16, we will delete that information as quickly as possible. If you believe that we might have any Personal Information from a child under age 16, please contact us at the address provided in Section 13 (How to Contact Us).

LINKS TO OTHER WEB SITES AND SERVICES

The Service may integrate with or contain links to other third party sites and services. We are not responsible for the practices employed by third party websites or services embedded in, linked to, or linked from the Service, and your interactions with any third party website or service are subject to that third party’s own rules and policies. You are responsible for examining third party websites’ privacy policies and for making your own decisions regarding the accuracy, reliability and correctness of material and information found.

HOW TO CONTACT US
If you have any questions or otherwise need to contact us in connection with this Privacy Notice or the Service, please contact us at:
MasonCo LLC
legal@usemason.com

CHANGES TO OUR PRIVACY NOTICE

Mason may modify or update this Privacy Notice from time to time to reflect the changes in our business and practices or applicable laws, and you should therefore review this page periodically. We will update the ‘last modified’ date at the bottom of this page when we make any changes. Further, when we change this Privacy Notice in a material manner, we will let you know of such material change in addition to updating the ‘last updated’ date at the top of this Privacy Notice.